New Ransomware Campaign “TZW” Linked to GlobeImposter Targets South Korean Organizations

A new ransomware campaign called TZW is affecting organizations in South Korea. The campaign is linked to the known malware family GlobeImposter, suggesting that the actors behind GlobeImposter are rebranding and updating their payloads to obfuscate their identity and sidestep crackdowns.